CVE-2018-10923

Name of the Vulnerable Software and Affected Versions glusterfs (affected versions not specified)

Description The issue allows an authenticated attacker to create an arbitrary device and read data from any device attached to the glusterfs server node by exploiting the "mknod" call derived from mknod(2). This can be used to create files pointing to devices on a glusterfs server node.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.